[heybeaux]

Demonstrated gap (new exp72 / RT62)

Preregistered SwarmLab spec78 12edf6f, frozen harness 796b77e, before results. Actual fetched Aegis main32391a4 red twice: all18 interactive input cases bypass review and all session/payload identity probes fail. Nine management/legacy controls, independent deny and destructive exec positive control pass. Real runtime97108ec same27cases allgreen. Raw red-red-green, source/dist/package manifests and pinned actual-package CI in linked SwarmLab PR (added next).

Fix

• Classify process.write/send-keys/paste/submit as ProcessInput.
• Independent core ask floor, no fabricated rule hits; cannot be waived by empty pack/severity/predictor optimism; independent deny wins.
• Bind action/sessionId/data/keys/hex/literal/text/bracketed/eof through detached digest into approvalSignature and actionKeyFor.
• Preserve management and legacy calls. Benign/empty input intentionally needs review: fragments/CR/EOF may execute prior buffered commands.
• Host still owns validated JSON, authentic process identity, terminal state and exact approved execution. No terminal-emulation, safe-fragment exemption, actual approval-consumption or production-plugin rollout claim.

Checks / qualification

17 focused tests; final full local release:check1226 tests (628+216+22+86+217+57) and historical52/52. New candidate evidence stays pending/outside landed catalogue. Frozen package experiment27/27, fresh exact-head source/dist/evaluation equality. Static score ledger is historical, not live runtime proof. No .acr changes; no Territory refresh. Previous CI-red PR78 and issue79 untouched; current CI must be observed, no rerun-to-green or bypass. Same caller contract/schema; no new live config/deployment.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: d96cc17a-dc2d-4444-8c58-6c6c332b0f57

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[heybeaux]

Linked experiment/evidence PR: heybeaux/swarmlab#63 . Frozen red-red-green and fresh exact-package CI live there. Previous PR78/issue79 remains independent and untouched.

[heybeaux]

Final observable-interface audit caught a real regression: an existing critical content rule scoped to process denied on main but only asked after tool refinement. Preserved red in nightly artifacts; fixed3acbacc by retaining legacy process scope for ProcessInput. Two regression tests added. Same frozen27-case experiment re-admitted after full1228-test release green; old green retained as superseded. Earlier CI does not certify this head. Waiting for fresh checks; initial reviewer missed this gap.

[heybeaux]

Verified normal guarded merge72f9692. Merged-main releaseCI40283360499 SUCCESS; final candidate1228tests/historical52/52. Merged source/packages/docs equal final checked PR. Linked SwarmLab main exp72CI40283365675 SUCCESS. Initial process-scope regression corrected before landing; prior PR78 untouched; no production plugin rollout or catalogue promotion claimed.